Security Commander™
Find it. Prove it. Fix it. Retest it.
Overall Security Score
62/100
TERMINATOR CLEANS
0
Critical
0
High
1
Medium
1
Low
3
Resolved
Attack Surface
Pages
API Endpoints
Auth Flows
Forms
Workflows
Webhooks
Background Jobs
Third-Party Integrations
Recent Findings
medium
Sensitive Data Exposure in JWT Claimsopen
critical
Insecure Direct Object Reference (IDOR) on Booking APIverified
high
Stored Cross-Site Scripting (XSS) in Special Instructionsverified
medium
Rate Limiting Bypass on Password Resetverified
low
Information Disclosure via Verbose Error Messagesopen
Recent Test Sessions
full pentest
The security posture of the Terminator Cleans application is currently weak due to critical IDOR flaws in the core booking functionality. While authentication mechanisms exist, they lack robust rate-limiting and sensitive data is improperly handled in JWTs. Immediate remediation of the authorization layer is required to prevent significant data leakage.completed